Snort see only 1 category for rule?